1. Scope and roles
This Addendum applies when Prozen Technologies OPC Pvt Ltd ("Processor") processes personal data on behalf of a customer ("Controller") through Web Compliance Suite. It forms part of the Terms of Service and applies automatically for as long as we process such data. Customers who need a signed copy can ask at legal@webcompsuite.com.
2. Details of processing
- Subject matter: providing website scanning and reporting.
- Duration: the subscription term plus the deletion period below.
- Data subjects: the Controller's workspace members and invitees; people whose data happens to appear on scanned pages or in evidence.
- Data types: names, e-mail addresses, roles, sign-in and audit events, and any personal data on scanned pages.
- Purpose: to perform the Service as instructed in the Controller's configuration and requests.
3. Our obligations
- Process personal data only on the Controller's documented instructions (the Service settings and these terms), unless the law requires otherwise, and tell you if an instruction appears unlawful.
- Ensure people with access are bound by confidentiality.
- Apply the security measures described on our Security page.
- Help the Controller respond to data-subject requests and carry out impact assessments, taking into account the nature of processing.
- Tell the Controller without undue delay after becoming aware of a personal data breach, with the information we have.
- On closure, delete or return personal data, with deletion from live systems within 30 days and from backups within a further 35 days, unless the law requires retention.
- Make available the information needed to show compliance and allow reasonable audits, normally satisfied by written answers and our documentation; on-site audits only where required by law and with reasonable notice.
4. Subprocessors
The Controller authorises the subprocessors on the Subprocessors page. We will give at least 30 days' notice of a new one by e-mail to the workspace owner; the Controller may object on reasonable data-protection grounds, and if we cannot accommodate the objection, may terminate the affected service with a pro-rata refund. We remain responsible for our subprocessors and bind them to equivalent obligations.
5. International transfers
Where processing involves a transfer that needs a lawful mechanism, the parties rely on the standard contractual clauses (processor-to-processor or controller-to-processor as applicable), which are incorporated by reference, and on equivalent mechanisms under other laws.
6. Liability and order of precedence
Liability under this Addendum is subject to the limits in the Terms. If this Addendum conflicts with the Terms on the processing of personal data, this Addendum prevails.